Threats, malware, and attack techniques

Credential harvesting

Collecting usernames, passwords, or session tokens via fake login pages, keystroke capture, or deceptive prompts.